Password Export Server (PES)
The PES service installation in the source domain requires an encryption key
However, you must create the encryption key on the computer running the ADMT in the target domain
On Target Domain: admtkey /option:create /sourcedomain:<SourceDomain> /keyfile:<KeyFilePath> /keypassword:{<password>|*}
On Source Domain:
%systemroot%\Windows\ADMT\PES folder, run Pwdmig.msi
The .PES file got Created on the destination domain
Install ADMT 3.0 on the source domain`s domain controller and the run Pwdmig.msi ( %systemroot%\Windows\ADMT\PES folder)